openssl/apps, branch OpenSSL_1_0_2-stable

Update copyright year

2019-12-20T09:33:50Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/10664)

Fix an s_server arbitrary file read issue on Windows

2019-10-28T13:20:02Z

Running s_server in WWW mode on Windows can allow a client to read files outside the s_server directory by including backslashes in the name, e.g. GET /..\myfile.txt HTTP/1.0 There exists a check for this for Unix paths but it is not sufficient for Windows. Since s_server is a test tool no CVE is assigned. Thanks to Jobert Abma for reporting this. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/10215) (cherry picked from commit 0a4d6c67480a4d2fce514e08d3efe571f2ee99c9)

openssl req: don't try to report bits

2018-09-04T12:29:36Z

With the introduction of -pkeyopt, the number of bits may change without |newkey| being updated. Unfortunately, there is no API to retrieve the information from a EVP_PKEY_CTX either, so chances are that we report incorrect information. For the moment, it's better not to try to report the number of bits at all. Fixes #7086 Reviewed-by: Paul Yang Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/7096) (cherry picked from commit 17147181bd3f97c53592e2a5c9319b854b954039)

Update copyright year

2018-08-14T12:40:34Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6955)

Fix some more gcc-9 warnings [-Wstringop-truncation]

2018-06-25T13:30:28Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6586)

apps: when the 'compat' nameopt has been set, leave it be

2018-05-31T09:02:21Z

XN_FLAG_COMPAT has a unique property, its zero for value. This means it needs special treatment; if it has been set (which can only be determined indirectly) and set alone (*), no other flags should be set. (*) if any other nameopt flag has been set by the user, compatibility mode is blown away. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/6382) (cherry picked from commit 3190d1dca43ecfd748c06aa06752de06af3768b9)

Fix memory leaks in CA related functions.

2018-05-12T22:40:54Z

(cherry picked from commit aebd0e5ca12d1ba0b229a4121a54afa5ea2d8aa1) Reviewed-by: Andy Polyakov Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6238)

s_server: fix warnings unused-but-set-variable (no-dh)

2018-04-27T04:00:10Z

This patch fixes the following two warnings when OpenSSL is built with no-dh option: s_server.c: In function 's_server_main': s_server.c:1105:25: warning: variable 'no_dhe' set but not used [-Wunused-but-set-variable] int no_tmp_rsa = 0, no_dhe = 0, no_ecdhe = 0, nocert = 0; ^ s_server.c:1101:11: warning: variable 'dhfile' set but not used [-Wunused-but-set-variable] char *dhfile = NULL; ^ CLA: trivial Signed-off-by: Cristian Stoica Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/6087)

Fix documentation for the -showcerts s_client option

2018-04-25T09:56:02Z

This option shows the certificates as sent by the server. It is not the full verified chain. Fixes #4933 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6069)

apps/s_socket.c: Fix do_accept

2018-04-19T19:08:00Z

do_accept() checked that the peer IP address had a PTR record, and would fail if not. The retrieved named was then never used, even though passed around. All this is unnecessary, so we remove it. Fixes #3407 Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/6018)